Latest Breach news

Chemical facilities warned of possible data theft in CISA CSAT breach

CISA is warning that its Chemical Security Assessment Tool (CSAT) environment was breached in January after hackers deployed a webshell on its Ivanti device, potentially exposing sensitive security assessments and plans.
- Lawrence Abrams
- June 24, 2024
- 04:53 PM
- 1
CDK warns: threat actors are calling customers, posing as support

CDK Global has cautioned customers about unscrupulous actors calling them and posing as CDK agents or affiliates to gain unauthorized systems access. The warning follows ongoing cyberattacks that have hit CDK, a software-as-a-service (SaaS) platform that thousands of US car dealerships rely upon.
- Ax Sharma
- June 21, 2024
- 07:00 AM
- 3
CDK Global hacked again while recovering from first cyberattack

Car dealership SaaS platform CDK Global suffered an additional breach Wednesday night as it was starting to restore systems shut down in an previous cyberattack.
- Lawrence Abrams
- June 20, 2024
- 11:32 AM
- 0
CDK Global cyberattack impacts thousands of US car dealerships

Car dealership software-as-a-service provider CDK Global was hit by a massive cyberattack, causing the company to shut down its systems and leaving clients unable to operate their business normally.
- Lawrence Abrams
- June 19, 2024
- 01:58 PM
- 1
Insurance giant Globe Life investigating web portal breach

American financial services holding company Globe Life says attackers may have accessed consumer and policyholder data after breaching one of its web portals.
- Sergiu Gatlan
- June 14, 2024
- 08:39 AM
- 0
Ascension hacked after employee downloaded malicious file

Ascension, one of the largest U.S. healthcare systems, revealed that a May 2024 ransomware attack was caused by an employee who downloaded a malicious file onto a company device.
- Sergiu Gatlan
- June 13, 2024
- 05:52 PM
- 0
New York Times warns freelancers of GitHub repo data breach

The New York Times notified an undisclosed number of contributors that some of their sensitive personal information was stolen and leaked after its GitHub repositories were breached in January 2024.
- Sergiu Gatlan
- June 13, 2024
- 03:52 PM
- 0
Advance Auto Parts stolen data for sale after Snowflake attack

Threat actors claim to be selling 3TB of data from Advance Auto Parts, a leading automotive aftermarket parts provider, stolen after breaching the company's Snowflake account.
- Sergiu Gatlan
- June 05, 2024
- 05:56 PM
- 1
AI platform Hugging Face says hackers stole auth tokens from Spaces

AI platform Hugging Face says that its Spaces platform was breached, allowing hackers to access authentication secrets for its members.
- Lawrence Abrams
- June 02, 2024
- 04:56 PM
- 0
DMM Bitcoin warns that hackers stole $300 million in Bitcoin

Japanese bitcoin exchange DMM Bitcoin is warning that 4,502.9 Bitcoin (BTC), or approximately $308 million (48.2 billion yen), has been stolen from one of its wallets today, making it the most significant cryptocurrency heist of 2024.
- Lawrence Abrams
- May 31, 2024
- 05:06 PM
- 0
Snowflake account hacks linked to Santander, Ticketmaster breaches

A threat actor claiming recent Santander and Ticketmaster breaches says they stole data after hacking into an employee's account at cloud storage company Snowflake. However, Snowflake disputes these claims, saying recent breaches were caused by poorly secured customer accounts.
- Sergiu Gatlan
- May 31, 2024
- 01:31 PM
- 1
Data of 560 million Ticketmaster customers for sale after alleged breach

A threat actor known as ShinyHunters is selling what they claim is the personal and financial information of 560 million Ticketmaster customers on the recently revived BreachForums hacking forum for $500,000.
- Sergiu Gatlan
- May 30, 2024
- 04:34 PM
- 0
Everbridge warns of corporate systems breach exposing business data

Everbridge, an American software company focused on crisis management and public warning solutions, notified customers that unknown attackers had accessed files containing business and user data in a recent corporate systems breach.
- Sergiu Gatlan
- May 30, 2024
- 11:45 AM
- 0
Intercontinental Exchange to pay $10M SEC penalty over VPN breach

The Intercontinental Exchange (ICE) will pay a $10 million penalty to settle charges brought by the U.S. Securities and Exchange Commission (SEC) after failing to ensure its subsidiaries promptly reported an April 2021 VPN security breach.
- Sergiu Gatlan
- May 22, 2024
- 01:20 PM
- 0
Europol confirms web portal breach, says no operational data stolen

Europol, the European Union's law enforcement agency, confirmed that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after a threat actor claimed they stole For Official Use Only (FOUO) documents containing classified data.
- Sergiu Gatlan
- May 11, 2024
- 08:36 AM
- 1
Ascension redirects ambulances after suspected ransomware attack

Ascension, a major U.S. healthcare network, is diverting ambulances from several hospitals due to a suspected ransomware attack that has been causing clinical operation disruptions and system outages since Wednesday.
- Sergiu Gatlan
- May 10, 2024
- 02:51 PM
- 2
Zscaler takes "test environment" offline after rumors of a breach

Zscaler says that they discovered an exposed "test environment" that was taken offline for analysis after rumors circulated that a threat actor was selling access to the company's systems.
- Lawrence Abrams
- May 08, 2024
- 07:30 PM
- 0
Ascension healthcare takes systems offline after cyberattack

Ascension, one of the largest private healthcare systems in the United States, has taken some of its systems offline to investigate what it describes as a "cyber security event."
- Sergiu Gatlan
- May 08, 2024
- 05:28 PM
- 0
UK confirms Ministry of Defence payroll data exposed in data breach

The UK Government confirmed today that a threat actor recently breached the country's Ministry of Defence and gained access to part of the Armed Forces payment network.
- Ionut Ilascu
- May 07, 2024
- 03:41 PM
- 0
MITRE says state hackers breached its network via Ivanti zero-days

The MITRE Corporation says a state-backed hacking group breached its systems in January 2024 by chaining two Ivanti VPN zero-days.
- Sergiu Gatlan
- April 19, 2024
- 03:02 PM
- 4